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1 • A method of controlling access to a content item in a system comprising a set 

of devices, 

the method comprising a step of associating at least one usage right with the 

content item, 

characterized in that 

the method further comprises decomposing the usage right into a set of partial 

rights, 

and subsequently separately signing each one of the set of partial rights, 
resulting in a corresponding signature. 

2 - The method of claim 1, wherein at least one device in the system is able to 

access and exercise at least one of the partial rights after verification of the corresponding 
signature. 

3 • 1116 method of claim 1 , wherein one of the partial rights associated with the 

content item comprises one of a render right, a transfer right, an offer right, a derivative work 
right, and a utility right. 

4 - The method of claim 1 , wherein at least one of the partial rights can only be 
exercised a limited number of times. 

5 - The method of claim 1, wherein the method further comprises a step where 
one device of the set of devices verifies whether the partial right and the issuer thereof have 
httik set been revoked before exercising the partial right. 

6 - The method of claim 1 , wherein said system comprises a set of devices, 
making up a domain comprising of devices which are related to a household or limited group 
of consumers. 
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7. The method of claim 1 , wherein a minimum required protection level of at 

least one partial right is indicated along with the partial right. 

8 - ^ method of claim 1 , wherein a niinimum required protection level of at 

least one partial right is derived implicitly from the type of the partial right. 

9. The method of claim 6, wherein the method further comprises allowing at least 
one device in the system, to identify a different device, 

to subsequently sign information comprising a combination of at least one 
partial right and at least one out of 

an identification of the domain, 

an identification of the different device, and 

information about length and validity of the partial right, 

and to subsequently transfer this signed combination to the different device. 

10. The method of claim 6, wherein the method further comprises allowing at least 
one device in the system, to identify a different device, 

to subsequently sign at least one partial right; 

and to subsequently transfer the signed partial right to the different device. 

1 1 . The method of claim 9, wherein the different device participates as 
representing a different domain. 

12. The method of claim 1 1 , wherein the transfer to the different device is allowed 
to occur only after at least one of the device and the different device has been verified by the 
other device to be at least one of being compliant and being non revoked. 

13. The method of claim 1 1 , wherein the partial right is revoked or deleted by the 
device which transfers the right to the different device. 



14. 

system, 



The method of claim 6, 

wherein the method further comprising allowing at least one device in the 
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wherein the usage right is associated with the content item by a content 

provider, 

wherein the usage right comprises an offer right (for a specific right), 

the method further comprising requesting the content provider to execute the 

offer right and deliver the specific right to a specified third party, 

upon which the content provider, after verification of conditions that may 

apply, delivers the specific right directly to the specified third party. 

l5 - A client system comprising a set of devices, the client system being arranged 

to perform access control to a content item, with handling means for a usage right associated 
with the content item, characterized in that the usage right is a set of individually signed 
partial rights, and the client system is being arranged to verify individually and handle 
individually the partial rights. 

16. A server system being arranged to perform access control to a content item, 
the server system further associating at least one usage right with the content item, 
characterized in that the server system has means to decompose the usage right into a set of 
partial rights, the server system further has a signing part being arranged to subsequently 
separately sign each one of the set of partial rights, and is arranged to bundle the individually 
signed partial rights into a set of individually signed partial rights. 

1 7. A signal for carrying usage rights characterized in that the usage rights are 
split into partial rights which are individually signed. 

18. A device arranged to perform access control to a content item, being able to 
handle a usage right associated with the content item, characterized in that the device is 
further arranged to handle the usage right which has been split into partial rights each of the 
partial rights having a digital signature. 



